data/CVE/list

@@ -82,7 +82,10 @@ CVE-2018-17944
 CVE-2018-17943
 	RESERVED
 CVE-2018-17942 (The convert_to_decimal function in vasnprintf.c in Gnulib before ...)
-	TODO: check
+	- gnulib <unfixed>
+	NOTE: pspp affecting bug: https://savannah.gnu.org/bugs/?func=detailitem&item_id=54686
+	NOTE: https://lists.gnu.org/archive/html/bug-gnulib/2018-09/msg00107.html
+	NOTE: https://github.com/coreutils/gnulib/commit/278b4175c9d7dd47c1a3071554aac02add3b3c35
 CVE-2018-17941
 	RESERVED
 CVE-2018-17940